CVE-2019-13990

ADVISORY - github

Summary

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

EPSS Score⁠: 0.07947 (0.916)

ADVISORY - nist

Improper Restriction of XML External Entity Reference

ADVISORY - github

Improper Restriction of XML External Entity Reference

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Improper Restriction of XML External Entity Reference

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

Improper Restriction of XML External Entity Reference

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.